2
Unix SMB/CIFS mplementation.
3
DSDB replication service helper function for outgoing traffic
5
Copyright (C) Stefan Metzmacher 2007
7
This program is free software; you can redistribute it and/or modify
8
it under the terms of the GNU General Public License as published by
9
the Free Software Foundation; either version 3 of the License, or
10
(at your option) any later version.
12
This program is distributed in the hope that it will be useful,
13
but WITHOUT ANY WARRANTY; without even the implied warranty of
14
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
15
GNU General Public License for more details.
17
You should have received a copy of the GNU General Public License
18
along with this program. If not, see <http://www.gnu.org/licenses/>.
23
#include "dsdb/samdb/samdb.h"
24
#include "auth/auth.h"
25
#include "smbd/service.h"
26
#include "lib/events/events.h"
27
#include "lib/messaging/irpc.h"
28
#include "dsdb/repl/drepl_service.h"
29
#include "lib/ldb/include/ldb_errors.h"
30
#include "../lib/util/dlinklist.h"
31
#include "librpc/gen_ndr/ndr_misc.h"
32
#include "librpc/gen_ndr/ndr_drsuapi.h"
33
#include "librpc/gen_ndr/ndr_drsblobs.h"
34
#include "libcli/composite/composite.h"
35
#include "auth/gensec/gensec.h"
37
struct dreplsrv_out_drsuapi_state {
38
struct composite_context *creq;
40
struct dreplsrv_out_connection *conn;
42
struct dreplsrv_drsuapi_connection *drsuapi;
44
struct drsuapi_DsBindInfoCtr bind_info_ctr;
45
struct drsuapi_DsBind bind_r;
48
static void dreplsrv_out_drsuapi_connect_recv(struct composite_context *creq);
50
static struct composite_context *dreplsrv_out_drsuapi_send(struct dreplsrv_out_connection *conn)
52
struct composite_context *c;
53
struct composite_context *creq;
54
struct dreplsrv_out_drsuapi_state *st;
56
c = composite_create(conn, conn->service->task->event_ctx);
57
if (c == NULL) return NULL;
59
st = talloc_zero(c, struct dreplsrv_out_drsuapi_state);
60
if (composite_nomem(st, c)) return c;
66
st->drsuapi = conn->drsuapi;
68
if (st->drsuapi && !st->drsuapi->pipe->conn->dead) {
71
} else if (st->drsuapi && st->drsuapi->pipe->conn->dead) {
72
talloc_free(st->drsuapi);
76
st->drsuapi = talloc_zero(st, struct dreplsrv_drsuapi_connection);
77
if (composite_nomem(st->drsuapi, c)) return c;
79
creq = dcerpc_pipe_connect_b_send(st, conn->binding, &ndr_table_drsuapi,
80
conn->service->system_session_info->credentials,
81
c->event_ctx, conn->service->task->lp_ctx);
82
composite_continue(c, creq, dreplsrv_out_drsuapi_connect_recv, st);
87
static void dreplsrv_out_drsuapi_bind_send(struct dreplsrv_out_drsuapi_state *st);
89
static void dreplsrv_out_drsuapi_connect_recv(struct composite_context *creq)
91
struct dreplsrv_out_drsuapi_state *st = talloc_get_type(creq->async.private_data,
92
struct dreplsrv_out_drsuapi_state);
93
struct composite_context *c = st->creq;
95
c->status = dcerpc_pipe_connect_b_recv(creq, st->drsuapi, &st->drsuapi->pipe);
96
if (!composite_is_ok(c)) return;
98
c->status = gensec_session_key(st->drsuapi->pipe->conn->security_state.generic_state,
99
&st->drsuapi->gensec_skey);
100
if (!composite_is_ok(c)) return;
102
dreplsrv_out_drsuapi_bind_send(st);
105
static void dreplsrv_out_drsuapi_bind_recv(struct rpc_request *req);
107
static void dreplsrv_out_drsuapi_bind_send(struct dreplsrv_out_drsuapi_state *st)
109
struct composite_context *c = st->creq;
110
struct rpc_request *req;
112
st->bind_info_ctr.length = 28;
113
st->bind_info_ctr.info.info28 = st->conn->service->bind_info28;
115
st->bind_r.in.bind_guid = &st->conn->service->ntds_guid;
116
st->bind_r.in.bind_info = &st->bind_info_ctr;
117
st->bind_r.out.bind_handle = &st->drsuapi->bind_handle;
119
req = dcerpc_drsuapi_DsBind_send(st->drsuapi->pipe, st, &st->bind_r);
120
composite_continue_rpc(c, req, dreplsrv_out_drsuapi_bind_recv, st);
123
static void dreplsrv_out_drsuapi_bind_recv(struct rpc_request *req)
125
struct dreplsrv_out_drsuapi_state *st = talloc_get_type(req->async.private_data,
126
struct dreplsrv_out_drsuapi_state);
127
struct composite_context *c = st->creq;
129
c->status = dcerpc_ndr_request_recv(req);
130
if (!composite_is_ok(c)) return;
132
if (!W_ERROR_IS_OK(st->bind_r.out.result)) {
133
composite_error(c, werror_to_ntstatus(st->bind_r.out.result));
137
ZERO_STRUCT(st->drsuapi->remote_info28);
138
if (st->bind_r.out.bind_info) {
139
switch (st->bind_r.out.bind_info->length) {
141
struct drsuapi_DsBindInfo24 *info24;
142
info24 = &st->bind_r.out.bind_info->info.info24;
143
st->drsuapi->remote_info28.supported_extensions = info24->supported_extensions;
144
st->drsuapi->remote_info28.site_guid = info24->site_guid;
145
st->drsuapi->remote_info28.pid = info24->pid;
146
st->drsuapi->remote_info28.repl_epoch = 0;
150
struct drsuapi_DsBindInfo48 *info48;
151
info48 = &st->bind_r.out.bind_info->info.info48;
152
st->drsuapi->remote_info28.supported_extensions = info48->supported_extensions;
153
st->drsuapi->remote_info28.site_guid = info48->site_guid;
154
st->drsuapi->remote_info28.pid = info48->pid;
155
st->drsuapi->remote_info28.repl_epoch = info48->repl_epoch;
159
st->drsuapi->remote_info28 = st->bind_r.out.bind_info->info.info28;
167
static NTSTATUS dreplsrv_out_drsuapi_recv(struct composite_context *c)
170
struct dreplsrv_out_drsuapi_state *st = talloc_get_type(c->private_data,
171
struct dreplsrv_out_drsuapi_state);
173
status = composite_wait(c);
175
if (NT_STATUS_IS_OK(status)) {
176
st->conn->drsuapi = talloc_steal(st->conn, st->drsuapi);
183
struct dreplsrv_op_pull_source_state {
184
struct composite_context *creq;
186
struct dreplsrv_out_operation *op;
188
struct dreplsrv_drsuapi_connection *drsuapi;
193
struct drsuapi_DsGetNCChangesCtr1 *ctr1;
194
struct drsuapi_DsGetNCChangesCtr6 *ctr6;
197
static void dreplsrv_op_pull_source_connect_recv(struct composite_context *creq);
199
struct composite_context *dreplsrv_op_pull_source_send(struct dreplsrv_out_operation *op)
201
struct composite_context *c;
202
struct composite_context *creq;
203
struct dreplsrv_op_pull_source_state *st;
205
c = composite_create(op, op->service->task->event_ctx);
206
if (c == NULL) return NULL;
208
st = talloc_zero(c, struct dreplsrv_op_pull_source_state);
209
if (composite_nomem(st, c)) return c;
214
creq = dreplsrv_out_drsuapi_send(op->source_dsa->conn);
215
composite_continue(c, creq, dreplsrv_op_pull_source_connect_recv, st);
220
static void dreplsrv_op_pull_source_get_changes_send(struct dreplsrv_op_pull_source_state *st);
222
static void dreplsrv_op_pull_source_connect_recv(struct composite_context *creq)
224
struct dreplsrv_op_pull_source_state *st = talloc_get_type(creq->async.private_data,
225
struct dreplsrv_op_pull_source_state);
226
struct composite_context *c = st->creq;
228
c->status = dreplsrv_out_drsuapi_recv(creq);
229
if (!composite_is_ok(c)) return;
231
dreplsrv_op_pull_source_get_changes_send(st);
234
static void dreplsrv_op_pull_source_get_changes_recv(struct rpc_request *req);
236
static void dreplsrv_op_pull_source_get_changes_send(struct dreplsrv_op_pull_source_state *st)
238
struct composite_context *c = st->creq;
239
struct repsFromTo1 *rf1 = st->op->source_dsa->repsFrom1;
240
struct dreplsrv_service *service = st->op->service;
241
struct dreplsrv_partition *partition = st->op->source_dsa->partition;
242
struct dreplsrv_drsuapi_connection *drsuapi = st->op->source_dsa->conn->drsuapi;
243
struct rpc_request *req;
244
struct drsuapi_DsGetNCChanges *r;
246
r = talloc(st, struct drsuapi_DsGetNCChanges);
247
if (composite_nomem(r, c)) return;
249
r->out.level_out = talloc(r, int32_t);
250
if (composite_nomem(r->out.level_out, c)) return;
251
r->in.req = talloc(r, union drsuapi_DsGetNCChangesRequest);
252
if (composite_nomem(r->in.req, c)) return;
253
r->out.ctr = talloc(r, union drsuapi_DsGetNCChangesCtr);
254
if (composite_nomem(r->out.ctr, c)) return;
256
r->in.bind_handle = &drsuapi->bind_handle;
257
if (drsuapi->remote_info28.supported_extensions & DRSUAPI_SUPPORTED_EXTENSION_GETCHGREQ_V8) {
259
r->in.req->req8.destination_dsa_guid = service->ntds_guid;
260
r->in.req->req8.source_dsa_invocation_id= rf1->source_dsa_invocation_id;
261
r->in.req->req8.naming_context = &partition->nc;
262
r->in.req->req8.highwatermark = rf1->highwatermark;
263
r->in.req->req8.uptodateness_vector = NULL;/*&partition->uptodatevector_ex;*/
264
r->in.req->req8.replica_flags = rf1->replica_flags;
265
r->in.req->req8.max_object_count = 133;
266
r->in.req->req8.max_ndr_size = 1336811;
267
r->in.req->req8.extended_op = DRSUAPI_EXOP_NONE;
268
r->in.req->req8.fsmo_info = 0;
269
r->in.req->req8.partial_attribute_set = NULL;
270
r->in.req->req8.partial_attribute_set_ex= NULL;
271
r->in.req->req8.mapping_ctr.num_mappings= 0;
272
r->in.req->req8.mapping_ctr.mappings = NULL;
275
r->in.req->req5.destination_dsa_guid = service->ntds_guid;
276
r->in.req->req5.source_dsa_invocation_id= rf1->source_dsa_invocation_id;
277
r->in.req->req5.naming_context = &partition->nc;
278
r->in.req->req5.highwatermark = rf1->highwatermark;
279
r->in.req->req5.uptodateness_vector = NULL;/*&partition->uptodatevector_ex;*/
280
r->in.req->req5.replica_flags = rf1->replica_flags;
281
r->in.req->req5.max_object_count = 133;
282
r->in.req->req5.max_ndr_size = 1336770;
283
r->in.req->req5.extended_op = DRSUAPI_EXOP_NONE;
284
r->in.req->req5.fsmo_info = 0;
287
req = dcerpc_drsuapi_DsGetNCChanges_send(drsuapi->pipe, r, r);
288
composite_continue_rpc(c, req, dreplsrv_op_pull_source_get_changes_recv, st);
291
static void dreplsrv_op_pull_source_apply_changes_send(struct dreplsrv_op_pull_source_state *st,
292
struct drsuapi_DsGetNCChanges *r,
294
struct drsuapi_DsGetNCChangesCtr1 *ctr1,
295
struct drsuapi_DsGetNCChangesCtr6 *ctr6);
297
static void dreplsrv_op_pull_source_get_changes_recv(struct rpc_request *req)
299
struct dreplsrv_op_pull_source_state *st = talloc_get_type(req->async.private_data,
300
struct dreplsrv_op_pull_source_state);
301
struct composite_context *c = st->creq;
302
struct drsuapi_DsGetNCChanges *r = talloc_get_type(req->ndr.struct_ptr,
303
struct drsuapi_DsGetNCChanges);
304
uint32_t ctr_level = 0;
305
struct drsuapi_DsGetNCChangesCtr1 *ctr1 = NULL;
306
struct drsuapi_DsGetNCChangesCtr6 *ctr6 = NULL;
308
c->status = dcerpc_ndr_request_recv(req);
309
if (!composite_is_ok(c)) return;
311
if (!W_ERROR_IS_OK(r->out.result)) {
312
composite_error(c, werror_to_ntstatus(r->out.result));
316
if (*r->out.level_out == 1) {
318
ctr1 = &r->out.ctr->ctr1;
319
} else if (*r->out.level_out == 2 &&
320
r->out.ctr->ctr2.mszip1.ts) {
322
ctr1 = &r->out.ctr->ctr2.mszip1.ts->ctr1;
323
} else if (*r->out.level_out == 6) {
325
ctr6 = &r->out.ctr->ctr6;
326
} else if (*r->out.level_out == 7 &&
327
r->out.ctr->ctr7.level == 6 &&
328
r->out.ctr->ctr7.type == DRSUAPI_COMPRESSION_TYPE_MSZIP &&
329
r->out.ctr->ctr7.ctr.mszip6.ts) {
331
ctr6 = &r->out.ctr->ctr7.ctr.mszip6.ts->ctr6;
332
} else if (*r->out.level_out == 7 &&
333
r->out.ctr->ctr7.level == 6 &&
334
r->out.ctr->ctr7.type == DRSUAPI_COMPRESSION_TYPE_XPRESS &&
335
r->out.ctr->ctr7.ctr.xpress6.ts) {
337
ctr6 = &r->out.ctr->ctr7.ctr.xpress6.ts->ctr6;
339
composite_error(c, werror_to_ntstatus(WERR_BAD_NET_RESP));
343
if (!ctr1 && !ctr6) {
344
composite_error(c, werror_to_ntstatus(WERR_BAD_NET_RESP));
348
if (ctr_level == 6) {
349
if (!W_ERROR_IS_OK(ctr6->drs_error)) {
350
composite_error(c, werror_to_ntstatus(ctr6->drs_error));
355
dreplsrv_op_pull_source_apply_changes_send(st, r, ctr_level, ctr1, ctr6);
358
static void dreplsrv_op_pull_source_apply_changes_send(struct dreplsrv_op_pull_source_state *st,
359
struct drsuapi_DsGetNCChanges *r,
361
struct drsuapi_DsGetNCChangesCtr1 *ctr1,
362
struct drsuapi_DsGetNCChangesCtr6 *ctr6)
364
struct composite_context *c = st->creq;
365
struct repsFromTo1 rf1 = *st->op->source_dsa->repsFrom1;
366
struct dreplsrv_service *service = st->op->service;
367
struct dreplsrv_partition *partition = st->op->source_dsa->partition;
368
struct dreplsrv_drsuapi_connection *drsuapi = st->op->source_dsa->conn->drsuapi;
369
const struct drsuapi_DsReplicaOIDMapping_Ctr *mapping_ctr;
370
uint32_t object_count;
371
struct drsuapi_DsReplicaObjectListItemEx *first_object;
372
uint32_t linked_attributes_count;
373
struct drsuapi_DsReplicaLinkedAttribute *linked_attributes;
374
const struct drsuapi_DsReplicaCursor2CtrEx *uptodateness_vector;
375
bool more_data = false;
380
mapping_ctr = &ctr1->mapping_ctr;
381
object_count = ctr1->object_count;
382
first_object = ctr1->first_object;
383
linked_attributes_count = 0;
384
linked_attributes = NULL;
385
rf1.highwatermark = ctr1->new_highwatermark;
386
uptodateness_vector = NULL; /* TODO: map it */
387
more_data = ctr1->more_data;
390
mapping_ctr = &ctr6->mapping_ctr;
391
object_count = ctr6->object_count;
392
first_object = ctr6->first_object;
393
linked_attributes_count = ctr6->linked_attributes_count;
394
linked_attributes = ctr6->linked_attributes;
395
rf1.highwatermark = ctr6->new_highwatermark;
396
uptodateness_vector = ctr6->uptodateness_vector;
397
more_data = ctr6->more_data;
400
composite_error(c, werror_to_ntstatus(WERR_BAD_NET_RESP));
404
status = dsdb_extended_replicated_objects_commit(service->samdb,
409
linked_attributes_count,
413
&drsuapi->gensec_skey,
415
if (!W_ERROR_IS_OK(status)) {
416
DEBUG(0,("Failed to commit objects: %s\n", win_errstr(status)));
417
composite_error(c, werror_to_ntstatus(status));
421
/* if it applied fine, we need to update the highwatermark */
422
*st->op->source_dsa->repsFrom1 = rf1;
425
* TODO: update our uptodatevector!
429
dreplsrv_op_pull_source_get_changes_send(st);
436
WERROR dreplsrv_op_pull_source_recv(struct composite_context *c)
440
status = composite_wait(c);
443
return ntstatus_to_werror(status);